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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 



- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 
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• Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 

Any reply received by the Oflice later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

!)□ Responsive to conDmunication(s) filed on . 

2a)^ This action is FINAL. 2b)n This action is non-final. 

3) n Since this application is in condition for allowance except for formal nnatters, prosecution as to the merits is 

closed in accordance with the practice under Ex pa/teQuay/e, 1935 CD. 11, 453 O.G. 213. 

Disp sition of Claims 

4) S Claim(s) 1-16 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) n Claim(s) is/are allowed. 

6) ^ Claim(s) 1-16 is/are rejected. 
?)□ Claim(s) is/are objected to. 

8) n Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) n The specification is objected to by the Examiner. 

10) n The drawing(s) filed on is/are: a)n accepted or b)n objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the conrection is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
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DETAILED ACTION 



1 



This action is in reply to applicant's correspondence of 27 September 2004. 



2. 



Claims 1-16 are pending for examination. 



3. 



Claims 1-16 remain rejected. 



Claim Rejections - 35 USC §102 



The following is a quotation of the appropriate paragraphs of 35 U.S. C. 102 that form the 
basis for the rejections under this section made in this Office action: 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except that an 
international application filed under the treaty defined in section 351(a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 21(2) of such treaty in the English language. 

4. Claims 1-16 are rejected under 35 U.S.C 102(e) as being anticipated by Mirov et al, U.S. 
Patent 6,138,236. 

5. As per claim 1; "A method for protecting a microcomputer system from manipulation of 
data stored in a storage arrangement of the microcomputer system, the microcomputer system 
including a microcomputer allocated to the storage arrangement [Abstract, figure 1 and 
accompanying description, col. 1, lines 13-col. 2,line 4], comprising the steps of: causing the 
microcomputer to access the storage arrangement for processing the data [Abstract, figure 1 and 
accompanying description, col. 1, lines 13-col 2,line 4, col. 2,lines 7-63]; and before the storage 
arrangement is accessed, performing the steps of assigning an individual identifier to one of the 
allocated microcomputer and the storage arrangement, generating a comparison code and storing 
the comparison code in the storage arrangement as a function of the individual identifier 
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[Abstract, figure 1 and accompanying description, col. 1, lines 13-coL 2,line 4, col. 2,lines 7-63], 
and at a time that is one of before and during an operation of the microcomputer system, 
generating a security code as a function of the individual identifier and comparing the security 
code with the comparison code [Abstract, figure 1,3,4 and accompanying descriptions, col. 
l,lines 13-col. 2,line 4, col. 2,lines 7-63]."; 

Further, as per claim 10; "A storage arrangement [This claim is the system claim for the 
method claim 1 above, and is rejected for the same reasons provided for the claim 1 rejection] in 
which data are stored and to which is allocated at least one microcomputer that accesses the 
storage arrangement for processing the data, comprising: an arrangement for storing a 
comparison code that is generated as a function of an individual identifier assigned to one of the 
at least one microcomputer and the storage arrangement; and an arrangement for, at a time that is 
one of before and during an operation of the storage arrangement, generating a security code as a 
function of the individual identifier and for comparing the security code with the comparison 
code."; 

Further, as per claim 14; "A microcomputer system [This claim is the system claim for 
the method claim 1 above, and is rejected for the same reasons provided for the claim 1 
rejection], comprising: a microcomputer: and a storage arrangement assigned to the 
microcomputer, wherein: data are stored in the storage arrangement, the microcomputer accesses 
the storage arrangement in order to process the data, in the storage arrangement, a comparison 
code that is generated as a function of an individual identifier assigned to one of the 
microcomputer and to the storage arrangement is stored, and the microcomputer includes an 
arrangement for, at a time that is one of before and during an operation of the microcomputer 
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system, for generating a security code as a function of the individual identifier and to compare 
the security code with the comparison code.". 

6. Claim 2 additionally recites the limitation that; "The method according to claim 1, 
wherein: the data corresponds to a program.". The teachings of Mirov et al suggest such 
limitations (Abstract, figure 1,3,4 and accompanying descriptions, col 1, lines 13-col. 2,line 4, 
col. 2,lines 7-63, whereas the "plurality of micro code" is clearly a stored program); 

Further, as per claim 1 1 additionally reciting the limitation that; "The storage 
arrangement [This claim is the system claim for the method claim 2 above, and is rejected for the 
same reasons provided for the claim 2 rejection] according to claim 10, wherein: the data 
correspond to a program."; 

Further, as per claim 15 additionally reciting the limitation that; "The microcomputer 
[This claim is the system claim for the method claim 2 above, and is rejected for the same 
reasons provided for the claim 2 rejection] according to claim 14, wherein: the data correspond 
to a program.". 

7. Claim 3 additionally recites the limitation that; "The method according to claim 1, 
wherein: a program stored in the storage arrangement is protected.". The teachings of Mirov et al 
suggest such limitations (Abstract, figure 1,3,4 and accompanying descriptions, col. 1, lines 13- 
col. 2,line 4, col 2,lines 7-63, whereas the "security sensitive environments require that the 
micro code be tamper proof . ." clearly constitutes a protected stored program). 
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8. Claim 4 additionally recites the limitation that; "The method according to claim 1, 
wherein before the storage arrangement is accessed, the method further comprises the steps of: 
storing the individual identifier as the comparison code in the storage arrangement; and at the 
time that is one of before and during the operation of the microcomputer system, performing a 
check as to whether the comparison code agrees with the individual identifier, used as the 
security code, of the allocated microcomputer,". The teachings of Mirov et al suggest such 
limitations (Abstract, figure 1,3,4 and accompanying descriptions, col. 1, lines 13-col. 2,line 4, 
col- 2,lines 7-63, col. 5, line 51 -col. 8,line 26, whereas the public key encryption oriented digital 
signature clearly constitutes an individual identifier as the comparison code). 

9. Claim 5 additionally recites the limitation that; "The method according to claim 1, 
wherein: the storage arrangement normally cooperates with the allocated microcomputer only 
when the security code agrees with the comparison code.". The teachings of Mirov et al suggest 
such limitations (Abstract, figure 1,3,4 and accompanying descriptions, col. l,lines 13-col. 2,line 
4, col 2,Iines 7-63, col. 5,line 51-col. 8,line 26, whereas the public key encryption oriented 
digital signature comparison success allows for the boot-up process to continue such that ". , .the 
trust level of the unsecured micro-code is raised to a level of trusted, other boot data such as the 
boot blocks of the disk drive. . ." , and thereby clearly constitutes the storage arrangement 
cooperating with the allocated microcomputer when the security code agrees with the 
comparison code). 
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10. Claim 6 additionally recites the limitation that; "The method according to claim 1, 
wherein: before an operation of the storage arrangement, after every start-up of the storage 
arrangement, the security code is generated and is compared with the comparison code The 
teachings of Mirov et al suggest such limitations (Abstract, figure 1,3,4 and accompanying 
descriptions, col 1, lines 13-col. 2,line 4, col. 2,lines 7-63, col. 5, line 51 -col. 8,Hne 26, whereas 
the public key encryption oriented digital signature comparison success allows for the boot-up 
process to continue such that . .the trust level of the unsecured micro-code is raised to a level of 
trusted, other boot data such as the boot blocks of the disk drive, . , and thereby clearly 
constitutes the storage arrangement cooperating with the allocated microcomputer when the 
security code agrees with the comparison code, again, throughout the memory access functions 
during "start-up of the storage arrangement".). 

1 1 . Claim 7 additionally recites the limitation that; "The method according to claim 6, 
further comprising the step of placing the storage arrangement in a mode in which, after every 
start-up, the storage arrangement is switched from an inactive state to an active state only when 
the security code agrees with the comparison code.". The teachings of Mirov et al suggest such 
limitations (Abstract, figure 1,3,4 and accompanying descriptions, col. l,lines 13-col. 2,line 4, 
col 2,lines 7-63, col. 5, line 51 -col. 8,line 26, whereas the public key encryption oriented digital 
signature comparison success allows for the boot-up process to continue such that ". . .the trust 
level of the unsecured micro-code is raised to alevel of trusted, other boot data such as the boot 
blocks of the disk drive. .." , and thereby clearly constitutes the storage arrangement cooperating 
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with the allocated microcomputer when the security code agrees with the comparison code, 
again, throughout the memory access functions during "start-up of the storage arrangement".); 

Further, as per claim 12 additionally reciting the limitation that; "The storage 
arrangement [This claim is the system claim for the method claim 7 above, and is rejected for the 
same reasons provided for the claim 7 rejection] according to claim 10, wherein: the storage 
arrangement is capable of being, placed in a mode in which, after every start-up, the storage 
arrangement is switched from an inactive state to an active state only when the security code 
agrees with the comparison code "; 

Further, as per claim 16 additionally reciting the limitation that; "The microcomputer 
[This claim is the system claim for the method claim 7 above, and is rejected for the same 
reasons provided for the claim 7 rejection] according to claim 14, wherein: the microcomputer is 
capable of being placed in a mode in which, after every start-up, the microcomputer is switched 
from an inactive state to an active state only when the security code agrees with the comparison 
code.". 

12. Claim 8 additionally recites the limitation that; "The method according to claim 6, 
fiirther comprising the step of placing the allocated microcomputer in a mode in which, after 
every start-up, the allocated in microcomputer is switched from an inactive to an active state only 
when the security code agrees with the comparison code.". The teachings of Mirov et al suggest 
such limitations (Abstract, figure 1,3,4 and accompanying descriptions, col. 1, lines 13-col. 2,line 
4, col. 2,lines 7-63, col. 5,line 51-col. 8,line 26, whereas the public key encryption oriented 
digital signature comparison success allows for the boot-up process to continue such that ". . .the 
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trust level of the unsecured micro-code is raised to a level of trusted, other boot data such as the 
boot blocks of the disk drive. . , and thereby clearly constitutes the storage arrangement 
cooperating with the allocated microcomputer when the security code agrees with the 
comparison code, again, throughout the memory access functions during "start-up of the storage 
arrangement".). 

13. Claim 9 additionally recites the limitation that; "The method according to claim 1, 
further comprising the steps of executing a validation program stored in a read-only memory of 
the allocated microcomputer; determining a code word in the validation program from at least 
one part of a memory content of the storage arrangement in accordance with a key; and 
comparing the code word with a comparison code word stored in the storage arrangement The 
teachings of Mirov et al suggest such limitations (Abstract, figure 1,3,4 and accompanying 
descriptions, col. 1, lines 13-col. 2,line 4, col. 2,lines 7-63, col. 5,line 51 -col. 8,Hne 26, whereas 
the public key encryption oriented digital signature comparison success allows for the boot-up 
process to continue such that . .the trust level of the unsecured micro-code is raised to a level of 
trusted, other boot data such as the boot blocks of the disk drive. . , and thereby clearly 
constitutes the storage arrangement cooperating with the allocated microcomputer when the 
security code agrees with the comparison code, again, throughout the memory access functions 
during "start-up of the storage arrangement".). 

14. Claim 13 additionally recites the limitation that; "The storage arrangement according to 
claim 10, wherein: the storage arrangement corresponds to a flash memory.". The teachings of 
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Mirov et al suggest such limitations (Abstract, figure 1,3,4 and accompanying descriptions, col. 
l,lines 13-col. 2,line 4, coL 2,lines 7-63, whereas the . . flash PROM is divided into two main 
sections.. is clearly a storage arrangement corresponding to a flash memory.). 

Response to Amendment 

15. As per applicant's argument concerning the lack of teaching of security and comparison 
codes, both a function of the same individual identifier, the examiner has fully considered the 
arguments and finds them not to be persuasive. The firmware authentication prior to re-execution 
via a upgrade of same clearly encompasses the ' . . . protecting a microcomputer system from 
manipulation of data stored in a storage arrangement of the microcomputer system. . . ' [i.e., 
Abstract, col 2,lines 7-33], as broadly interpreted by the examiner. Further, the predetermined 
digital signature clearly does corresponds to the applicant's use of the comparison code, as 
broadly interpreted by the examiner, in that the signature is pre-generated prior to access, and is 
clearly individualized relative to the memory signature (i.e., a unique checksum aspect of the 
memory arrangement would be inherent given a unique key and memory configuration per se.). 
The data and verification hash comparison clearly as part of the authentication process to run 
(any) software, let alone the upgraded software (i.e., the new firmware), again, clearly as broadly 
interpreted by the examiner, encompasses the teaching of the code comparison aspects of the 
claim limitation language. The claim language specifically dealing with the phrase 'individual 
identifier' is sufficiently broad such that checksums, memory individuality aspects of 
signature/hash considerations, would therefore be applicable in the rejection. 
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16. XmS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.1 36(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) v^ll be calculated fi*om the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS fi-om the mailing 
date of this final action. 



17. Any inquiry concerning this communication or earlier communications fi-om examiner 
should be directed to Ronald Baum, whose telephone number is (571) 272-3681, and whose 
unofficial Fax number is (571) 273-3681. The examiner can normally be reached Monday 
through Friday fi-om 8:00 AM to 5:30 PM, 

If attempts to reach the examiner by telephone are unsuccessfiil, the examiner's 
supervisor, Ayaz Sheikh, can be reached at (571) 272-3795. The Fax number for the organization 
where this application is assigned is 703-872-9306. 



Conclusion 



Ronald Baum 




Patent Examiner 
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